Skip to main

You are here

Darktrace acquires UK cyber investigation services firm

Darktrace acquires UK cyber investigation services firm

Darktrace is acquiring UK-based cyber investigation and response provider Cado Security, in a deal expected to be completed this February.

Cado says it examines the intricacies of nearly any system, capturing a snapshot of data stored on the device, and then conducting forensic investigations to uncover signs of compromise or threats.

Darktrace intends to “accelerate” the growth of Cado's existing products through investment, while also combining Cado's forensic investigation technology with Darktrace's existing ActiveAI Security Platform, “enhancing data collection across multiple cloud environments to better defend customers' operations”, it said.

This richer data set can also enable “significant augmentation” to Darktrace's Cyber AI Analyst, which investigates alerts, streamlines investigations and prioritises incidents, added Darktrace.

Cado was founded by James Campbell, CEO, and Chris Doman, CTO. Prior to founding Cado, Campbell served as a director at PwC, building the Cyber Incident Response service there. His background also includes a career in intelligence, previously leading Australia's National Incident Response capability as the assistant director of operations at the Australian Signals Directorate. Doman is known for building the popular threat intelligence portal ThreatCrowd, which then merged into the AlienVault Open Threat Exchange, and which was subsequently acquired by AT&T.

They, and the rest of the Cado team, will be joining Darktrace upon the completion of the deal. Cado's R&D teams in London and Bristol will work alongside Darktrace's established R&D centres in Cambridge, UK and The Hague, the Netherlands, to “drive further innovation” in Darktrace's cloud detection and response capabilities.

“The addition of Cado's deep expertise in cloud-based data collection and forensics will enhance our ability to protect customers, ensuring they can operate securely and confidently across all areas of their business,” said Jill Popelka, Darktrace chief executive officer.

The value of the acquisition has not been disclosed. Darktrace was acquired by private equity firm Thoma Bravo in October 2024.